Static task
static1
Behavioral task
behavioral1
Sample
0c71ca27bfcf04378f02fed0c943fbdd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c71ca27bfcf04378f02fed0c943fbdd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c71ca27bfcf04378f02fed0c943fbdd_JaffaCakes118
-
Size
79KB
-
MD5
0c71ca27bfcf04378f02fed0c943fbdd
-
SHA1
c85b43b57789088df844ad664dd7678a42c2204f
-
SHA256
0dc113a0a64058a709a7580bc9539107b3819f9baf0d8c443a5e47a9bad663c3
-
SHA512
4b34536f7b5ecaa09b42a603a962794dde5a3ac1794deabbfc169fb53c8daa75f6cb6efeca955b1ed65356d64ed04dbf5f22324d00e19ec8f943ef660403d217
-
SSDEEP
1536:7gGVgjrv6ASMksdH/qxObyPHohVMS5dK2RxEDxagybMhDQUxw0OC:cMy6hMkQfqxObigqSRElJDQuw0b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c71ca27bfcf04378f02fed0c943fbdd_JaffaCakes118
Files
-
0c71ca27bfcf04378f02fed0c943fbdd_JaffaCakes118.exe windows:5 windows x86 arch:x86
e0efd0a344bc1c0daf3197493c46b256
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
swprintf
memset
kernel32
GetTickCount
VirtualProtect
user32
LoadStringW
EndDialog
SetWindowLongW
GetDlgItem
GetDlgCtrlID
SetDlgItemInt
MessageBoxW
DialogBoxParamW
FillRect
PostQuitMessage
SetTimer
GetDlgItemInt
SetDlgItemTextW
GetClientRect
SendMessageW
GetWindowLongW
gdi32
CreateFontIndirectW
DeleteObject
GetStockObject
CreateSolidBrush
SetBkColor
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ